java-1.8.0-openjdk: Fix of 6 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity integrity flaw in TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity flaw in JPEG handling - CVE-2026-47021: 2D,...

GHSA-W4MQ-XH27-6XPX

creationtimestamp| type| source ---|---|--- 2026-08-22 10:31:15+00:00| seen| https://gist.github.com/alon710/2b3f0356900578390c8450f33458882e...

CVE-2026-59286

CVE-2026-59286...

CVE-2026-55241

creationtimestamp| type| source ---|---|--- 2026-08-22 08:02:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnsqduoqo2o...

GHSA-CQMQ-8755-7XVH

creationtimestamp| type| source ---|---|--- 2026-08-22 07:32:13+00:00| seen| https://gist.github.com/alon710/fba1ad6c3ccaacdec698da20783bacca...

CVE-2026-30826

creationtimestamp| type| source ---|---|--- 2026-08-22 07:03:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnpgxm75v22...

CVE-2026-16612

The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unauthenticated users to disclose and enumerate password-protected products and their metadata without entering the product password. Two...

CVE-2026-16612

CVE-2026-16612 affects the FiboSearch WordPress plugin prior to version 1.34.1 . The plugin fails to consistently exclude password-protected products from two unauthenticated AJAX endpoints : the autocomplete search endpoint (dgwt_wcas_ajax_search) and the Details Panel endpoint (dgwt_wcas_result...

EUVD-2026-64217

The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unauthenticated users to disclose and enumerate password-protected products and their metadata without entering the product password. Two...

CVE-2026-16612 FiboSearch < 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure

The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unauthenticated users to disclose and enumerate password-protected products and their metadata without entering the product password. Two...

EUVD-2026-64215

The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors...

GHSA-MMFR-PMJX-HW9W

creationtimestamp| type| source ---|---|--- 2026-08-22 05:32:17+00:00| seen| https://gist.github.com/alon710/a8fb06e2d4be25e5dcde47f19754cbdb...

CVE-2026-77068

creationtimestamp| type| source ---|---|--- 2026-08-22 05:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtnjnv52532y...

CVE-2026-76074

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an...

CVE-2026-19883

creationtimestamp| type| source ---|---|--- 2026-08-22 03:48:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtnek7zciz2h 2026-08-22 04:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnf6vth7x27 2026-08-22 08:01:31+00:00| seen|...

EUVD-2026-64211

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an...

CVE-2026-76074 AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an...

CVE-2026-76074

AutomatorWP – Automator (WordPress plugin) is vulnerable to an authorization bypass in all versions up to and including 5.8.4 . The automatorwp_campaign_monitor_get_lists AJAX action does not properly verify that the requesting user holds the plugin's manager capability. Because the required nonc...

CVE-2026-76057 AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an...

CVE-2026-76057

The AutomatorWP – Automator WordPress plugin (no-code automations, webhooks & custom integrations) is vulnerable to authorization bypass in all versions up to and including 5.8.4 . The root cause is a missing authorization check on the automatorwp_convertkit_get_forms AJAX action: the required no...